gnu-social/plugins/ActivityPub/lib/models
Diogo Cordeiro 4d171b27a4 [ActivityPub][NOTE] Do not extract actor from attributedTo
There was no checking of attributedTo, actors and referent object IDs to make
sure they exist in the same domain. Therefore, one could spoof messages from
people by doing attributedTo: whoever-i-want-to-spoof
2020-07-05 15:38:12 +01:00
..
Activitypub_accept.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_announce.php [ActivityPub] Properly handle Actor URIs by using events correctly 2019-12-10 23:50:56 +00:00
Activitypub_attachment.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_create.php [ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously 2019-10-11 19:09:12 +01:00
Activitypub_delete.php [ActivityPub] Handle DELETE-Person activity 2019-09-03 03:26:35 +01:00
Activitypub_error.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_follow.php [ActivityPub] Properly handle Actor URIs by using events correctly 2019-12-10 23:50:56 +00:00
Activitypub_like.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_mention_tag.php [ActivityPub] The protocol allows content to be null, GNU social doesn't, we'll reject silentiously 2019-10-11 19:09:12 +01:00
Activitypub_message.php [ActivityPub] Properly handle Actor URIs by using events correctly 2019-12-10 23:50:56 +00:00
Activitypub_notice.php [ActivityPub][NOTE] Do not extract actor from attributedTo 2020-07-05 15:38:12 +01:00
Activitypub_reject.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_tag.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00
Activitypub_undo.php [ActivityPub] Move models from 'classes' to 'lib/models' 2019-08-21 16:46:39 +01:00